Privacy Notice

Last updated: October 1, 2026

Oceanbox Designs LLC (“we,” “us,” or “our”) is the data controller responsible for the personal information described in this Privacy Policy. This policy explains how we collect, use, and disclose personal information when you visit our website, use our online store, purchase products, create an account, subscribe to emails, or contact us.

Our Terms of Service govern your use of our website and purchases from our store. This Privacy Policy explains our data practices and your privacy rights. Visiting our website or accepting our Terms of Service does not constitute consent to optional cookies, advertising tracking, or marketing communications.

Information We Collect

Depending on how you interact with us, we collect:

  • Contact information, including your name, email address, phone number, and billing or shipping address.
  • Order and account information, including purchases, payment confirmations, and account credentials.
  • Messages, reviews, and photos or videos you submit.
  • Subscription preferences and privacy choices.
  • Technical information, including your IP address, browser, device information, pages viewed, and shopping activity.

We collect information directly from you, automatically through website technologies subject to your consent where required, and from providers supporting payments, shipping, and website security. Certain information is necessary to complete a purchase or provide a requested service. Without it, we may be unable to fulfill your request.

How We Use Your Information

  • Process payments, fulfill orders, and arrange delivery.
  • Maintain customer accounts and provide order updates.
  • Respond to questions and handle returns or warranty claims.
  • Publish reviews or content you submit for publication.
  • Send marketing emails when you subscribe.
  • Improve website performance and measure advertising results, subject to your privacy choices and consent where required.
  • Prevent fraud and protect website security.
  • Maintain records, comply with applicable obligations, and resolve disputes.

Legal Bases Under the GDPR

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on the following legal bases:

  • Contract: To process purchases, arrange delivery, maintain requested accounts, and provide services you request.
  • Legal obligations: To meet applicable accounting, tax, and other legal requirements.
  • Legitimate interests: To protect our website, prevent fraud, handle customer inquiries, manage appropriate records, and establish or defend legal claims, where these interests are not overridden by your rights and freedoms.
  • Consent: For subscription marketing, optional cookies, advertising tracking, and other activities requiring your permission. You may withdraw consent at any time.

We do not treat browsing our website or making a purchase as consent to optional tracking or marketing.

Payments and Service Providers

Payments are processed through Stripe and the supported payment methods displayed at checkout.

  • We do not store full payment-card numbers or card security codes on our website.
  • We retain transaction references and payment status to manage purchases.
  • We disclose relevant information to providers supporting payments, shipping, hosting, security, email communications, reviews, analytics, and advertising. Optional tracking disclosures are subject to your choices and consent where required.
  • Providers may process information on our behalf or as independent controllers for their own disclosed purposes, depending on the service.

We may also disclose information when legally required, to protect legal rights, or in connection with a business sale or transfer.

Cookies and Advertising Tracking

We use cookies, pixels, and similar technologies to operate our store and, with your permission where required, understand website activity and measure advertising performance.

  • Essential cookies support requested functions such as your shopping cart, checkout, account login, security, and remembering privacy preferences. Cookies strictly necessary to provide a service you request do not require consent and cannot be disabled through our preference controls.
  • Analytics cookies help us understand website use and improve performance.
  • Marketing cookies and pixels from Facebook/Meta, Google, and other advertising companies may measure campaign performance and help display relevant advertisements. They may collect IP addresses, device information, pages visited, and shopping activity, including cart and purchase events. Advertising providers may associate this information with their own identifiers or accounts.
  • Embedded third-party content, such as videos or social media features, may collect information when activated. Consent is requested before consent-required tracking associated with that content is enabled.

Managing Cookie Consent

Use “Privacy Options” in our website footer to open the cookie preference controls. You can accept all optional cookies, reject all optional cookies, or select Analytics and Marketing separately and save your choices.

Where consent is required under applicable European cookie rules and the GDPR:

  • Optional cookies and consent-required tracking remain disabled until you actively opt in. Optional choices are not preselected for consent.
  • Browsing, scrolling, closing the notice, or completing a purchase does not constitute consent.
  • You may change your choices or withdraw consent at any time through Privacy Options. Withdrawing consent is as easy as giving it.
  • Withdrawal stops future tracking that relies on that consent. It does not affect the lawfulness of processing carried out before withdrawal.
  • Rejecting optional cookies does not prevent you from browsing products or making a purchase. Optional third-party features may remain unavailable.
  • Opting out of Marketing cookies may reduce the relevance of advertisements you see, including those highlighting special offers, limited releases, or services tailored to your interests.
  • Opting out of Analytics cookies limits our ability to understand website activity and improve your experience.
  • These choices do not affect your ability to shop, access available offers, or receive emails you have subscribed to.

Your choices generally apply to the browser and device you use. Using another browser or device, or clearing cookies, may require you to select your preferences again. You can also use browser settings to delete or reject stored cookies. Blocking essential cookies through your browser may affect checkout or account functions. Browser controls alone may not stop every form of advertising tracking; use our website controls as well.

Privacy Signals and Advertising Opt Outs

Where applicable law requires us to honor an opt-out preference signal such as Global Privacy Control (GPC), we treat it as a request to opt out of applicable sale, sharing, or targeted advertising for the browser or device sending the signal. A GPC signal does not constitute consent to optional cookies.

You may also use Privacy Options or contact us to exercise applicable advertising opt-out rights. Other automated browser “Do Not Track” signals are not currently recognized by our website.

Marketing Communications

  • You can unsubscribe from marketing emails using the unsubscribe option in each email.
  • Necessary order, shipping, and support messages will continue.
  • We may retain limited records to respect unsubscribe preferences and document consent.

Third Party Websites and Links

We may include helpful links to unaffiliated websites in product information or articles. These websites have their own privacy practices, which are outside our control. Review their policies before providing personal information.

Reviews and Submitted Content

  • Reviews and content submitted for publication may be publicly visible, including your chosen display name and submitted images.
  • Avoid including information you do not want made public.
  • Contact us to request removal of your published personal information.

Retention and Security

We retain personal information only as long as needed for its purpose and applicable legal requirements. Retention depends on the type of information, the service involved, and applicable accounting, warranty, and limitation periods.

  • Order records are retained for accounting obligations, warranty administration, and applicable dispute periods.
  • Account information is retained while needed to maintain your account, subject to deletion requests and necessary recordkeeping.
  • Support records are retained while needed to resolve inquiries, administer warranties, and handle related claims.
  • Marketing information is retained while subscribed, with limited records kept afterward to respect opt-outs and document consent.
  • Technical information is retained according to security needs and configured system retention periods.
  • Deleted information may remain in restricted backups until those backups expire through their normal retention cycle.

Withdrawing cookie consent does not automatically delete information already lawfully collected. You may separately request deletion, subject to applicable legal exceptions. We use reasonable safeguards to protect information, but no transmission or storage method is completely secure.

International Processing

We operate in the United States, and our providers may process information in other countries. Privacy protections in those countries may differ from those in your location.

Where the GDPR requires safeguards for international transfers, we use an applicable adequacy decision or appropriate contractual safeguards, with additional protections where necessary. You may contact us for details or a copy of applicable safeguards, subject to necessary redactions.

Your Privacy Rights

Depending on applicable law and the circumstances, you may have rights to:

  • Access your personal information and request correction of inaccurate or incomplete information.
  • Request deletion of your information, subject to legal exceptions.
  • Restrict processing or object to processing based on legitimate interests.
  • Receive a portable copy of eligible information processed by automated means on the basis of consent or contract.
  • Withdraw consent at any time without affecting earlier lawful processing.
  • Object at any time to processing for direct marketing.
  • Opt out of applicable sale, sharing, or targeted advertising.
  • Receive protections concerning solely automated decisions with legal or similarly significant effects.
  • Lodge a complaint with a competent data protection authority.

Contact us using the details below to exercise your rights. For cookie consent, you can use Privacy Options directly. We may need to verify your identity, and legal exceptions may apply.

GDPR requests are normally answered within one month of receipt. Where permitted because of the complexity or number of requests, this period may be extended by up to two additional months. We will notify you within the first month and explain the reason. Requests are normally free of charge; fees or refusal are permitted only in circumstances allowed by applicable law.

You may complain to the relevant supervisory authority where you habitually reside, work, or believe an infringement occurred. UK residents may contact the Information Commissioner’s Office.

Children’s Information

Our website is not directed at children under 16 years of age. If you believe a child has provided personal information improperly, contact us so we can investigate and take appropriate action.

Policy Changes

We may update this policy as our practices or applicable requirements change without prior notice. The revised date appears above. Additional notice or consent will be provided when required.

Privacy Contact

For privacy questions or requests about this Privacy Notice, contact:

Oceanbox Designs LLC
Email: [email protected]
Mailing address: 3526 Lakeview Pkwy Ste. B140, Rowlett, TX 75088, United States